432
AI controls is coming to Firefox (blog.mozilla.org)
submitted 6 months ago by to c/technology@lemmy.world
131 comments fedilink hide all child comments
 

Starting with Firefox 148, which rolls out on Feb. 24, you’ll find a new AI controls section within the desktop browser settings. It provides a single place to block current and future generative AI features in Firefox.

They actually listened to the community, thats very nice.

you are viewing a single comment's thread
view the rest of the comments
[–] 10 points 6 months ago (1 child)

@blaggle42 @solrize
https://www.w3tutorials.net/blog/firefox-add-ons-how-to-install-my-own-local-add-on-extension-permanently-in-firefox/

There er multiple ways but yes they don't make it easy cause the want to make the attack vector aka ( a "friend" sent you a email with the "hottest new" firefox extension ) as small as possible.

Showing a important part of the website link. Step 3: Install an Unsigned .xpi (Advanced) #Unsigned XPIs require manual placement in your Firefox profile (and may need Firefox Developer Edition/Nightly). Enable Unsigned Extensions (If Needed): Open Firefox Developer Edition/Nightly. Navigate to about:config. Search for xpinstall.signatures.required and set it to false (double-click the preference). Warning: Disabling signature checks exposes you to security risks. Only install unsigned extensions from trusted sources.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 6 points 6 months ago (2 children)

    I understand what you are saying - but - if I want to install a program on my computer - I should be allowed to do so - the same with firefox

    maybe it might need me doing the equivalent of sudo, entering some password - or just clicking through, "ok, yes I know, extensions can do bad things.", "yes I really know that I shouldn't install an extension if I don't know exactly what it is" 10 times, but

    etc..

    I just don't buy the "attack vector" argument. There are many ways to mitigate, without removing the ability.

    Anyway, in a way this was a good experience - I am going to try to ditch firefox sooner than later now.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 3 points 6 months ago (1 child)

    Using dev edition is the equivalent of sudo.

    Firefox can just install an extension from clicking a link, combine that with tech illiterate people just panic-clicking "ok" on every popup, that really is an attack vector.

    I mean, billions of people click yes on a "hey we're gonna take all your data and sell it to everyone, are you okay with that?" screen multiple times a day...

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 0 points 6 months ago (1 child)

    Again. You are saying you shouldn't be able to install applications on your computer.

    I mean, if that's what you believe. I don't. I think I should be able to decide what I run and where I run it.

    Especially if the company thinks of itself as open source.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 6 months ago (1 child)

    don't enable unsigned extensions. It's there for good reason.

    upload your addon to addons.mozilla.org. there's an option to not publish, but only upload for signing. then you'll get back a signed xpi you can install properly.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 6 months ago (1 child)

    Doesn't work. Try to do it without giving them a phone number or installing some other application. You can't. Or I couldn't.

    Then, after you can't and you think, "I'll go to the forums, see if there is a way." You'll find out Mozilla has problems with sign in. I mean come on.. But this is irrelevant, this whole flow is dumb. And it presumes that I shouldn't be able to control my own browser.

    We need a new firefox - just like the original firefox showed that Mozilla was bloat and dumb, we need another that shows the current is bloat and dumb.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 6 months ago (1 child)

    Doesn't work. Try to do it without giving them a phone number or installing some other application. You can't. Or I couldn't.

    how did you try? did you try registering a mozilla account?

    You'll find out Mozilla has problems with sign in.

    It's probably temporary, it doesn't have problems usually

    And it presumes that I shouldn't be able to control my own browser.

    they do it so that malware cant install unvetted addons to your browser. and if someone signs a malware addon this way, and some people report it, mozilla can disable it for everyone.

    We need a new firefox - just like the original firefox showed that Mozilla was bloat and dumb, we need another that shows the current is bloat and dumb.

    what you need is a footgun. you have it in about:config.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 6 months ago (1 child)

    Nah, I think we just need a dialog box - could be like osx - "are you sure you want to allow the plugin that you said you wanted to use? It was built by: you, not signed by Mozilla." Maybe put a "You have unsigned plugins running" tool tip - that gets displayed at startup or every 8 hours.

    Again - imagine if you couldn't install the programs you wanted on your computer - this is current firefox.

    I suppose we are both beating the already-dead-horse on different ends now.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 6 months ago (1 child)

    Nah, I think we just need a dialog box - could be like osx - "are you sure you want to allow the plugin that you said you wanted to use? It was built by: you, not signed by Mozilla." Maybe put a "You have unsigned plugins running" tool tip - that gets displayed at startup or every 8 hours.

    that won't help to warn the largest part of the target audience, those who were trained by big tech to dismiss those dialogs by reflex without reading a word in it

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 6 months ago

    I disagree, if the user has opened up about: has gone in an said, "I want to enable this local plugin permanently" and then says, "yes" to a "do you really want to do this"

    this is enough

    also just think if mac or windows or linux all of a sudden said, "no you can't install the software you want"

    you would be against I would think.

  • permalink
  • fedilink
  • source
  • parent